Can I use Keycloak as the sole authentication server for ERPNext?

[naikun]

I would like to know if it’s possible to use only Keycloak as the authentication server for ERPNext. My goal is to have the system redirect to the Keycloak login page instead of showing the default ERPNext login page when I access ERPNext. After the user successfully logs in with their username and password on the Keycloak page, they should be redirected back to ERPNext.

Is this achievable? Any guidance or resources on how to set this up would be greatly appreciated.

[revant_one]

Create a client on keycloak and add a social login key on frappe

[naikun]

Thanks for your reply.

I’ve created a client on keycloak and add a social login key on frappe successfully.

My question is if it’s possible to use ONLY Keycloak as the authentication server?

[revant_one]

Frappe OAuth - How to disable native login form

Workaround (no custom app) Add following script to Website Script or custom Website Theme: // Detect login page if ($('#page-login').length) { // Hide page $('body').hide(); // Login using custom social login button const loginBtn = $('.btn-castlecraft').length ? $('.btn-castlecraft')[0] : undefined; loginBtn && loginBtn.click(); } Note : replace .btn-castlecraft with your button’s class name in above code. Additionally, do the following if required: di…

[Andru]

There’s an easier way. Hover your mouse over the Keycloak button, and it will show the URL that Keycloak uses. Just create a redirect in nginx from https://erp.example.com/#login to that target URL. This way, anyone who accesses your ERPNext will be taken directly to Keycloak as the sole access point.